Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft
File:                     EGwPOVQQ8obIV2V219L3gwS16Do.mft (raw, json)
Hash identifier:          0dg2bABDGbmDAE8WV2v1TH8Mx/tNDooUhxL8XKD7uRY=
Subject key identifier:   55:A4:E7:55:F0:5C:D1:30:11:74:5E:D3:3A:24:5E:FF:6D:93:9F:44
Authority key identifier: 10:6C:0F:39:54:10:F2:86:C8:57:65:76:D7:D2:F7:83:04:B5:E8:3A
Certificate issuer:       /CN=106c0f395410f286c8576576d7d2f78304b5e83a
Certificate serial:       019D27E013626E36412D77E69FD0C8ED423B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EGwPOVQQ8obIV2V219L3gwS16Do.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft
Manifest number:          1885
Signing time:             Thu 26 Mar 2026 02:01:29 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:29 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:29 +0000
Files and hashes:         1: 9i5swc1J4tp7c1o23nouETORP2E.roa (hash: 7qCRSDMfyDVi133KELa0mQ4/QYn5UTkZYhIQJwFytHg=)
                          2: EGwPOVQQ8obIV2V219L3gwS16Do.crl (hash: SsDX2kIwRWk7PcQqkHcr5HQ0iO5x6Tut+UaQCdJCUIc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EGwPOVQQ8obIV2V219L3gwS16Do.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:13:62:6e:36:41:2d:77:e6:9f:d0:c8:ed:42:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106c0f395410f286c8576576d7d2f78304b5e83a
        Validity
            Not Before: Mar 26 02:01:29 2026 GMT
            Not After : Mar 27 02:01:29 2026 GMT
        Subject: CN=55a4e755f05cd13011745ed33a245eff6d939f44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d5:a2:f3:68:d1:88:7e:8e:40:22:7c:83:29:
                    50:b4:c0:0e:5e:53:97:ed:12:bf:c2:91:8f:e4:ce:
                    5a:27:2e:2e:36:a7:7b:61:f7:08:03:ef:6d:92:71:
                    5d:b0:fe:2c:54:7a:03:dd:51:99:30:00:23:1a:af:
                    c9:fc:45:d9:87:d6:93:63:e5:b1:62:b1:0b:57:99:
                    4e:af:be:aa:12:d1:ac:11:37:e8:3d:d2:b0:99:96:
                    d0:1c:e0:cb:27:cf:14:72:d8:e7:b8:08:c0:84:c7:
                    c3:a4:3b:d4:47:b2:d8:10:e8:ad:9e:3a:76:c3:4b:
                    59:4b:47:cd:1e:df:4d:e0:9d:d2:84:66:e8:6e:72:
                    bc:d5:bf:d8:d2:8d:33:cd:fd:cc:4f:fe:70:30:ad:
                    1f:f5:82:42:64:ed:69:c2:df:35:dd:83:be:32:1e:
                    c0:09:71:55:7f:94:57:d5:76:ed:08:14:b3:4f:87:
                    db:17:bc:45:53:87:dd:a0:cd:7a:0a:a9:70:29:98:
                    73:e7:4d:1f:9a:56:ba:eb:c8:25:b5:87:c5:f8:bc:
                    9f:bc:2a:2f:f3:b3:1d:c6:c0:df:55:96:13:ea:75:
                    1c:a8:d3:a6:27:bd:ad:99:7c:0a:dd:62:31:d5:3f:
                    a6:e4:ae:1d:ac:cd:4c:17:a2:4b:99:57:74:73:54:
                    0a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A4:E7:55:F0:5C:D1:30:11:74:5E:D3:3A:24:5E:FF:6D:93:9F:44
            X509v3 Authority Key Identifier:
                keyid:10:6C:0F:39:54:10:F2:86:C8:57:65:76:D7:D2:F7:83:04:B5:E8:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EGwPOVQQ8obIV2V219L3gwS16Do.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:60:d0:b9:cb:86:c4:02:71:b0:2d:07:30:d3:c2:a5:6b:9d:
         30:b5:3c:67:0f:76:86:5f:15:c4:69:c1:57:f4:c8:89:c2:d5:
         37:6b:be:c3:6d:15:14:c6:ea:16:dd:5b:9a:f9:1b:0d:34:1a:
         53:04:0e:c5:7f:0a:41:d6:66:c7:a8:c2:7d:1d:39:da:3a:e8:
         e3:c4:3e:72:d7:11:71:9c:a0:67:b3:f1:cd:44:fa:06:9b:75:
         f2:02:87:6c:50:dc:53:ed:e2:52:44:34:a3:76:da:1c:21:b5:
         a5:c0:5f:3b:25:a2:12:49:ac:62:e7:79:53:07:7a:94:c7:d9:
         73:e6:2d:6b:6e:a8:25:ce:e0:43:b2:2f:1d:78:fc:f2:fb:1a:
         92:32:b4:dc:a2:9e:de:84:16:72:f6:33:fe:d5:c1:91:29:78:
         c9:2b:67:94:86:45:8f:9f:07:46:64:1c:fa:2f:a2:12:e4:0a:
         f4:40:d5:64:7a:74:e8:51:3c:56:a0:6b:7b:2e:b8:90:b0:7f:
         31:57:d5:09:1e:1c:b2:ed:32:2b:4d:3b:4b:eb:6a:c4:db:64:
         bc:6d:96:06:62:ba:96:48:35:75:fa:e1:8c:05:7c:20:9e:01:
         8b:68:14:fc:b8:01:d8:01:46:09:5b:db:cd:03:76:3a:24:d2:
         07:7f:0f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:45:24 2026 by rpki-client